So it translates to either LDAP or Kerberos, we cannot enable both for same Hive Server. SSL is independent. So the supported situations are as below.
1. Anonymous authentication (w/ or w/o SSL) 2. LDAP authentication (w/ or w/o SSL) 3. Kerberos Cheers Dr Mich Talebzadeh LinkedIn * https://www.linkedin.com/profile/view?id=AAEAAAAWh2gBxianrbJd6zP6AcPCCdOABUrV8Pw <https://www.linkedin.com/profile/view?id=AAEAAAAWh2gBxianrbJd6zP6AcPCCdOABUrV8Pw>* http://talebzadehmich.wordpress.com *Disclaimer:* Use it at your own risk. Any and all responsibility for any loss, damage or destruction of data or any other property which may arise from relying on this email's technical content is explicitly disclaimed. The author will in no case be liable for any monetary damages arising from such loss, damage or destruction. On 30 April 2017 at 18:20, Mich Talebzadeh <mich.talebza...@gmail.com> wrote: > Thanks Kapil. > > Does this mean that one can have both Kerberos and LDAP (with SSL) and use > either? > > Cheers, > > Mich > > Dr Mich Talebzadeh > > > > LinkedIn * > https://www.linkedin.com/profile/view?id=AAEAAAAWh2gBxianrbJd6zP6AcPCCdOABUrV8Pw > <https://www.linkedin.com/profile/view?id=AAEAAAAWh2gBxianrbJd6zP6AcPCCdOABUrV8Pw>* > > > > http://talebzadehmich.wordpress.com > > > *Disclaimer:* Use it at your own risk. Any and all responsibility for any > loss, damage or destruction of data or any other property which may arise > from relying on this email's technical content is explicitly disclaimed. > The author will in no case be liable for any monetary damages arising from > such loss, damage or destruction. > > > > On 25 April 2017 at 22:42, Kapil Rastogi <krast...@cloudera.com> wrote: > >> Starting with CDH 5.7, clusters running LDAP-enabled HiveServer2 >> deployments also accept Kerberos authentication. >> >> https://www.cloudera.com/documentation/enterprise/5-8-x/ >> topics/cdh_sg_hiveserver2_security.html >> >> Hope that helps. >> Kapil >> >> On Fri, Apr 7, 2017 at 7:58 PM, Gopal Vijayaraghavan <gop...@apache.org> >> wrote: >> >>> >>> > Is there anyway one can enable both (Kerberos and LDAP with SSL) on >>> Hive? >>> >>> I believe what you're looking for is Apache Knox SSO. And for LDAP >>> users, Apache Ranger user-sync handles auto-configuration. >>> >>> That is how SSL+LDAP+JDBC works in the HD Cloud gateway [1]. >>> >>> There might be a similar solution from CDH, if you go digging for it. >>> >>> Cheers, >>> Gopal >>> [1] - https://hortonworks.github.io/hdp-aws/security-network/#prot >>> ected-gateway >>> >>> >>> >> >
